Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
CVE-2025-27613 With Gitk, the Git history browser, when a user clones an untrusted repository and runs gitk without additional command arguments,
jupyterlab 4.4.9 fixing CVE-2025-59842.
jupyterlab 4.4.9 fixing CVE-2025-59842.
jupyterlab 4.4.9 fixing CVE-2025-59842. Rebuilt for Python 3.14.0rc3 bytecode change
Resolve CVE-2025-47910
Multiple vulnerabilities were discovered in log4cxx, a logging library for C++ that is compatible with the JAVA log4j framework. CVE-2025-54812
4.0.6.3221
fix rhbz#2397702
fix rhbz#2397703
4.0.6.3221
Stanislav Fort discovered an out of bounds read and write issue when decrypting CMS messages that were encrypted using password based encryption.
* bsc#1235237 Cross-References: * CVE-2024-55553
CVE-2025-7493: host to admin escalation prevention: https://www.freeipa.org/release-notes/4-12-5.html Update FreeIPA to latest fixes from ipa-4-12 branch
Security update for path traversal CVE-2025-59825 / GHSA-3wgq-wrwc-vqmv.
Security update for path traversal CVE-2025-59825 / GHSA-3wgq-wrwc-vqmv.
* bsc#1250485 * bsc#1250487 Cross-References: * CVE-2025-59681
* bsc#1236851 * bsc#1248070 Cross-References: * CVE-2025-23419
* bsc#1242601 * bsc#1243869 Cross-References: * CVE-2024-12224
BIRD 3.1.4 (2025-09-22) BGP: Fixed crash on Notification with a message, CVE-2025-59688 BGP: Fixed invalid memory access in pending TX flush BGP: Fixed a rare …
Update to version 1.6.2. Includes fixes for CVE-2025-58066 (potential DoS in the ntpd-rs server) and CVE-2025-58160 (potential tracing log pollution).
Update to 1.9.11 to fix CVE-2025-30187
An issue was found in open-vm-tools, a set of tools for VMs hosted on VMware. The issue is related to a local privilege escalation in combination with the get-…
BIRD 3.1.4 (2025-09-22) BGP: Fixed crash on Notification with a message, CVE-2025-59688 BGP: Fixed invalid memory access in pending TX flush BGP: Fixed a rare …
Update to version 1.6.2. Includes fixes for CVE-2025-58066 (potential DoS in the ntpd-rs server) and CVE-2025-58160 (potential tracing log pollution).
